General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1012 Views
  • 1 replies
  • 9 Likes

VMWare series firewall

Just noticed a section of he help file for PANOS 5 which mentions a virtual firewall series from Palo Alto.  Sure am interested in some more info....

Bob

BobW by L4 Transporter
  • 1283 Views
  • 1 replies
  • 0 Likes

Resolved! Problem with multiple Netflow profiles

Hello,

I encounter a problem using multiple netflow profiles on our PA-500 running PAN-OS 4.1.8

I have defined 3 different neflow profiles, each refers to a specific port on the same host.

Each profile is assigned to exactly one physical layser 3 interf

...

lavision by L2 Linker
  • 3197 Views
  • 5 replies
  • 0 Likes

Block page and SSL

Hey all,

So, we have a need to block everyone but a small AD group access to a couple pages.  Now, we don't want to just "deny" them in the rule (we have a comfort page that promps them they are blocked and allows them to request access) - I don't wan

...

mrsold by Not applicable
  • 3433 Views
  • 6 replies
  • 0 Likes

Resolved! Application = insufficient-data?

We have some outgoing UDP traffic that shows up in the traffic log with "insufficient-data" in the application field. The problem is that this traffic is being allowed through the firewall because it's being matched to a rule that allows FTP traffic

...

ahopkins by L2 Linker
  • 14706 Views
  • 7 replies
  • 0 Likes

Resolved! Panorama license limit

Does anyone know if a customer owns a Panorama 25 device license and wants to add device #26, will it not allow them to add the 26th device or will it?

Thx

jwolach by L4 Transporter
  • 4251 Views
  • 8 replies
  • 0 Likes

Threat exception for selected hosts

Hi,

We have defined vulnerability group which consists of AV, Anti-Spyware and Vulnerability profile. The vulnerability profile is configured to block critical events and alert on high and med. I have a need to except few hosts which are alerting for

...

Resolved! 4.1.7 inspection causes corrupt download and speed issues

I have two 2050's in an HA pair A/P on 4.1.7.    I have a BGP setup with 100Mbps on one link and 250Mbps on another, and Gb to the LAN and DMZ.  I have transferred just over 3G through the PA in the last 60 minutes.

When I turn on inspection (Antiviru

...

EdwinD by L3 Networker
  • 4771 Views
  • 9 replies
  • 0 Likes

Exclude iTunes/App Store from decryption

I am using SSL decryption for all outbound traffic. Prior to the decryption rule I have a rule to attempt to exclude iTunes and App Store traffic from decryption.  The rule seems to be working, but the App Store fails with "NSURLErrorDomain error -10

...

Resolved! easy question, routing problem

Hello,

I think it's an easy question, but I can't solve it.

This is the situation.

We have two routers.

Router 1 (bintec RT1202) has two ethernet interfaces with different subnets sub1 (172.16.10.0/24), sub2 (172.16.20.0/24).

Router 2 is our palo alto PA

...

IDS_1 by Not applicable
  • 4826 Views
  • 6 replies
  • 0 Likes

user-agent ldap invalid credentials

We have a strange problem on some of our PA agents on our domain controllers;

in our PA we receive logging from some DC's with the next message:

ldap cfg RED-DC3 failed to connect to server <ip-address server>, source: <ip PA>: Invalid credentials

the s

...

moorken by L0 Member
  • 2019 Views
  • 0 replies
  • 0 Likes
Top Liked Authors